diff --git a/jwcrypto-1.0.tar.gz b/jwcrypto-1.0.tar.gz
deleted file mode 100644
index 62af83d..0000000
--- a/jwcrypto-1.0.tar.gz
+++ /dev/null
@@ -1,3 +0,0 @@
-version https://git-lfs.github.com/spec/v1
-oid sha256:f88816eb0a41b8f006af978ced5f171f33782525006cdb055b536a40f4d46ac9
-size 87992
diff --git a/jwcrypto-1.4.2.tar.gz b/jwcrypto-1.4.2.tar.gz
new file mode 100644
index 0000000..a8aa1db
--- /dev/null
+++ b/jwcrypto-1.4.2.tar.gz
@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:80a35e9ed1b3b2c43ce03d92c5d48e6d0b6647e2aa2618e4963448923d78a37b
+size 85106
diff --git a/python-jwcrypto.changes b/python-jwcrypto.changes
index 98b1ac7..8b8f6f2 100644
--- a/python-jwcrypto.changes
+++ b/python-jwcrypto.changes
@@ -1,3 +1,9 @@
+-------------------------------------------------------------------
+Fri Nov 18 14:57:01 UTC 2022 - Michael Ströder <michael@stroeder.com>
+
+- update to 1.4.2 which also fixes CVE-2022-3102
+  too many other changes to be listed here
+
 -------------------------------------------------------------------
 Wed Dec  8 14:25:36 UTC 2021 - pgajdos@suse.com
 
diff --git a/python-jwcrypto.spec b/python-jwcrypto.spec
index 0e7eda7..da8811a 100644
--- a/python-jwcrypto.spec
+++ b/python-jwcrypto.spec
@@ -1,7 +1,7 @@
 #
 # spec file for package python-jwcrypto
 #
-# Copyright (c) 2021 SUSE LLC
+# Copyright (c) 2022 SUSE LLC
 #
 # All modifications and additions to the file contributed by third parties
 # remain the property of their copyright owners, unless otherwise agreed
@@ -21,7 +21,7 @@
 %define skip_python2 1
 
 Name:           python-jwcrypto
-Version:        1.0
+Version:        1.4.2
 Release:        0
 Summary:        Python module package implementing JOSE Web standards
 License:        LGPL-3.0-only
@@ -64,6 +64,6 @@ rm -rv %{buildroot}%{_datadir}/doc/jwcrypto
 %files %{python_files}
 %{python_sitelib}/*
 %license LICENSE
-%doc README.md SECURITY.md
+%doc README.md
 
 %changelog